Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
File:                     7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json)
Hash identifier:          cKN167ga1KzOQRP+EDFtqSR82rqOKJmiBQKJRmY7Byw=
Subject key identifier:   19:12:55:92:BB:F4:19:E1:C9:19:0A:43:39:75:C7:40:B4:5B:54:4B
Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47
Certificate issuer:       /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
Manifest number:          0535
Signing time:             Tue 24 Mar 2026 23:11:44 +0000
Manifest this update:     Tue 24 Mar 2026 23:11:44 +0000
Manifest next update:     Tue 31 Mar 2026 23:11:44 +0000
Files and hashes:         1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: Dib63AFmPgz10Vsw+smGSWYV3u/gZwzxYEbAH8ZL2z0=)
                          2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 6jMHqR+sIEqTC6A+nK6qfLEa0VEYokKzKQUPqiIn6fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl
                          rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
        Validity
            Not Before: Mar 24 23:11:44 2026 GMT
            Not After : Mar 31 23:11:44 2026 GMT
        Subject: CN=69c31a30-a919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:a3:64:bf:40:6c:29:6b:f8:71:98:a1:c5:
                    33:0a:f5:53:a7:19:7e:4f:af:bb:e8:2a:6c:17:31:
                    83:0d:47:fc:a7:b8:a3:4e:56:a8:30:62:d2:9b:47:
                    11:9a:b0:dc:be:c3:c3:6d:32:41:f5:ba:81:15:d4:
                    7e:12:75:3a:15:05:13:72:00:82:17:3a:6b:92:03:
                    f2:a2:fa:68:3d:10:d7:98:ae:32:ae:43:e3:84:43:
                    99:0d:38:2e:3c:65:5e:66:93:0f:ab:bd:c6:7f:53:
                    68:06:49:1f:cd:22:2a:02:84:f1:7d:8d:a4:13:d5:
                    12:a1:a6:1a:e8:f5:61:f0:14:6d:17:c7:f1:5d:07:
                    38:7f:38:90:59:7a:1e:fc:e4:24:f1:b6:a4:a6:9e:
                    73:e4:cf:a1:c5:bf:dc:cc:4f:a8:d6:d8:af:de:d7:
                    fd:a0:e5:da:11:77:af:23:eb:08:0c:9b:d4:55:de:
                    68:81:5c:4f:25:7b:53:24:83:60:52:10:ae:a1:8d:
                    22:64:13:72:c7:b6:ff:d9:4e:84:e1:a2:a7:0b:21:
                    01:bf:5b:80:7d:a1:c5:ce:82:b2:0c:b9:9a:11:ca:
                    c7:09:7e:de:78:06:18:43:53:fe:9e:d3:be:4a:34:
                    17:75:a9:a3:9e:79:37:b9:f8:14:38:5b:29:4b:87:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:12:55:92:BB:F4:19:E1:C9:19:0A:43:39:75:C7:40:B4:5B:54:4B
            X509v3 Authority Key Identifier:
                keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:aa:7b:ee:31:66:b1:24:bf:79:45:8e:56:02:fa:53:34:
         9f:be:e9:e1:34:4e:79:0a:e9:c3:42:0e:ad:65:42:2e:a4:d0:
         cd:b0:76:69:dd:c6:74:b2:aa:8d:bd:83:4e:98:c1:a5:40:9e:
         22:98:96:08:27:9e:d2:9a:92:16:bd:af:3c:5c:48:5c:2c:7b:
         2a:bc:99:4c:6e:c8:6b:f1:1e:c4:ea:36:fd:1a:ca:29:09:76:
         8e:dd:73:83:d8:5f:69:24:3b:79:80:6c:6e:d7:41:92:3b:69:
         d8:de:8f:11:f0:05:7e:be:91:d4:e8:e6:fb:e5:46:9b:c2:cc:
         4e:92:b6:7e:ff:6c:88:a2:03:cc:41:dc:e0:6d:a6:a4:86:fe:
         52:30:f7:5e:1d:9a:2f:75:91:7a:2c:ab:1c:2a:c3:8a:2f:3c:
         b3:7a:67:64:3e:2d:62:2d:0b:10:ee:cc:04:f8:43:20:2d:4c:
         64:8b:6b:27:dc:f6:8f:d9:1e:7f:d4:6a:63:52:72:9f:9d:f7:
         a3:3e:8b:ce:7a:46:c4:5a:3f:76:f7:03:e7:07:c3:b0:99:f4:
         cd:55:f7:f0:3f:75:df:32:b3:cf:74:ad:2d:b3:71:fa:74:69:
         5f:4a:69:c4:7a:ca:f7:fb:c1:13:2c:58:03:57:ec:9e:a9:39:
         52:b2:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:28 2026 by rpki-client